Re: (PM) PPTP and filtering

Josh Richards (jrichard@livingston.com)
Tue, 10 Feb 1998 15:20:18 -0800 (PST)

On Tue, 10 Feb 1998, D'Andre Ladson wrote:

> I've searched through the mailing list archives and still can't
> find and answer. I've been assured by my ISP that they don't block
> port 1723 and they allow IP protocol 47. So I trying to make
> sure I'm not blocking them at my firewall.
>
> I'm using a Irx1 firewall/router with ComOS 3.0.1.R.
> In both my filter.in and filter.out I have.

A bit old..

>
> permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 1723 estab
> permit 0.0.0.0/0 0.0.0.0/0 tcp src eq 47 estab
>
> Has anyone else being able to get PPTP going?
>

Your #2 rule, does not have anything to do with permitting protocol 47...
you are saying to allow connections with a source port of 47 which is not
what you want. Try this:

2 permit 0.0.0.0/0 0.0.0.0/0 protocol 47

You'll need to upgrade to at least ComOS 3.5 for this to work.

Security note: Your above filter also allows connections from *any* AND to
*any* host with those ports/protocol. You may want to be a bit more
specific then that..

> Any help is appreciated.
>
> Thanks,
>
> D'Andre
> dandre@efficient.com

----
Josh Richards - <jrichard@livingston.com> - [Beta Engineer]
LUCENT Technologies - Remote Access Business Unit
(formerly Livingston Enterprises, Inc.)
http://www.livingston.com/

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.